Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          8yveqNgzWhuulOtGAZ6K4Lg29mwoQLSfnWFoF5obX8k=
Subject key identifier:   46:06:3D:1D:C3:A9:EF:7B:B7:B4:95:C4:F4:0A:30:AA:9C:03:6B:49
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       01962F06C5B84EB22D54DB43EE547DACF8E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          01D2
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: EH6VXDh1h/+cFlwaqr1s/+cS3cMBjFRDJ2SbX+125kA=)
                          2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c5:b8:4e:b2:2d:54:db:43:ee:54:7d:ac:f8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=46063d1dc3a9ef7bb7b495c4f40a30aa9c036b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:5a:8b:a6:89:18:3c:db:94:34:d2:6e:64:
                    f5:d2:64:0c:ea:fb:ef:df:e2:1d:c5:b9:84:2c:1e:
                    af:bb:36:13:fb:54:95:80:7c:a5:d8:8f:3c:8e:26:
                    dc:c2:08:29:2a:bb:82:99:9d:d2:df:27:30:08:00:
                    aa:37:28:87:02:cd:4e:97:8b:02:65:a0:e7:e5:06:
                    ff:da:20:0f:e7:da:0a:21:8f:1f:fc:1a:a2:c1:c2:
                    e1:6b:84:ad:cd:f2:07:4e:51:3c:86:85:54:04:32:
                    a4:17:d6:ce:a9:41:82:f8:7e:a5:d1:7e:e4:ba:ab:
                    31:e1:f0:e1:31:86:72:09:9f:e4:bb:12:96:e4:8a:
                    c2:e3:78:fa:cc:3c:2b:db:57:d0:3d:39:1c:bd:f9:
                    bf:b6:5a:a5:73:a3:7d:44:64:98:ac:d7:de:44:04:
                    d5:85:c2:fa:c0:4b:69:7f:57:38:4a:5e:e7:25:00:
                    73:68:78:68:84:b5:df:8b:69:55:8d:9a:c9:8b:72:
                    a5:40:d7:d8:00:6e:1c:85:9c:b1:19:85:24:e3:ba:
                    8c:a3:bf:d4:97:0b:56:83:b1:64:c2:a3:75:0c:7c:
                    88:ef:71:d5:c4:fe:bb:dc:77:ef:f2:de:f3:b6:4b:
                    fc:30:6e:e9:6b:43:01:00:f1:5d:d6:32:46:a8:f4:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:06:3D:1D:C3:A9:EF:7B:B7:B4:95:C4:F4:0A:30:AA:9C:03:6B:49
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c1:8d:15:05:9b:f5:5b:bd:42:1b:f2:3f:9f:70:d6:64:9a:
         33:ec:a8:14:be:23:6b:a4:e9:06:c3:a3:e3:4d:0f:de:bd:61:
         37:16:ac:55:ba:38:80:7a:70:b0:3e:75:a0:5d:11:3c:80:10:
         24:f6:a6:56:cd:9c:d8:1c:e4:e0:9b:78:c8:00:56:a9:88:aa:
         4d:e0:18:ed:d6:a8:e5:e4:dc:42:89:47:ff:50:31:f9:73:0b:
         dd:61:69:88:65:a1:c2:dd:f7:88:d4:8b:45:55:a9:20:17:36:
         89:08:00:3d:f8:d7:1d:75:b5:75:69:d7:98:d1:15:1e:09:bf:
         00:89:49:9d:7d:d6:0c:71:ac:fb:ab:97:37:f3:b6:dd:eb:5f:
         7f:61:e6:23:d2:ba:ba:39:87:eb:7a:d8:b1:89:f4:4f:91:f2:
         63:37:9e:55:4f:03:ea:f0:be:8b:24:db:70:52:04:56:6b:96:
         ae:76:1e:d4:d1:da:7e:c1:b0:6b:d6:85:90:40:85:be:d0:db:
         88:e1:92:ff:af:75:6e:50:a2:2f:cd:ef:82:51:72:0c:42:53:
         40:a9:b9:26:11:93:4e:e8:0a:0f:fe:b2:c8:cf:33:9a:f6:64:
         05:c6:7d:dd:ae:f8:c9:ec:d7:39:19:3c:9f:64:bd:25:17:3e:
         ee:24:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----